{"id":"CVE-2020-8286","title":"curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.","summary":"curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-295","CWE-295"],"vendor":"haxx","product":"libcurl","affected":["libcurl >= 7.41.0, < 7.74.0","fedora = 32","fedora = 33","debian_linux = 9.0","debian_linux = 10.0","clustered_data_ontap","hci_management_node","solidfire","hci_bootstrap_os","hci_storage_node_firmware","mac_os_x < 10.14.6","mac_os_x >= 10.15, < 10.15.7","mac_os_x = 10.14.6","mac_os_x = 10.15.7","macos >= 11.0, < 11.3","simatic_tim_1531_irc_firmware <= 2.2","sinec_infrastructure_network_services < 1.0.1.1","communications_billing_and_revenue_management = 12.0.0.3.0","communications_cloud_native_core_policy = 1.14.0","essbase = 21.2","peoplesoft_enterprise_peopletools = 8.58","universal_forwarder >= 8.2.0, < 8.2.12","universal_forwarder >= 9.0.0, < 9.0.6","universal_forwarder = 9.1.0"],"patched":["libcurl 7.74.0","mac_os_x 10.15.7","macos 11.3","sinec_infrastructure_network_services 1.0.1.1","universal_forwarder 9.0.6"],"published":"2020-12-14","updated":"2026-10-14","sourceUpdated":"2026-10-14T09:17:20.887","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2020-8286","references":[{"url":"http://seclists.org/fulldisclosure/2021/Apr/50","label":"support@hackerone.com"},{"url":"http://seclists.org/fulldisclosure/2021/Apr/51","label":"support@hackerone.com"},{"url":"http://seclists.org/fulldisclosure/2021/Apr/54","label":"support@hackerone.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf","label":"support@hackerone.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","label":"support@hackerone.com"},{"url":"https://curl.se/docs/CVE-2020-8286.html","label":"support@hackerone.com"},{"url":"https://hackerone.com/reports/1048457","label":"support@hackerone.com"},{"url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html","label":"support@hackerone.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/","label":"support@hackerone.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/","label":"support@hackerone.com"},{"url":"https://security.gentoo.org/glsa/202012-14","label":"support@hackerone.com"},{"url":"https://security.netapp.com/advisory/ntap-20210122-0007/","label":"support@hackerone.com"},{"url":"https://support.apple.com/kb/HT212325","label":"support@hackerone.com"},{"url":"https://support.apple.com/kb/HT212326","label":"support@hackerone.com"},{"url":"https://support.apple.com/kb/HT212327","label":"support@hackerone.com"},{"url":"https://www.debian.org/security/2021/dsa-4881","label":"support@hackerone.com"},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","label":"support@hackerone.com"},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","label":"support@hackerone.com"},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","label":"support@hackerone.com"},{"url":"http://seclists.org/fulldisclosure/2021/Apr/50","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2021/Apr/51","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2021/Apr/54","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://curl.se/docs/CVE-2020-8286.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hackerone.com/reports/1048457","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202012-14","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20210122-0007/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT212325","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT212326","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT212327","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2021/dsa-4881","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-200951.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-389290.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd"],"epss":0.04631,"epssPercentile":0.91514,"ingestedAt":"2026-10-14T09:24:26.058Z","slug":"CVE-2020-8286","body":"## Overview\n\ncurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.\n\n## Affected\n\n- `libcurl >= 7.41.0, < 7.74.0`\n- `fedora = 32`\n- `fedora = 33`\n- `debian_linux = 9.0`\n- `debian_linux = 10.0`\n- `clustered_data_ontap`\n- `hci_management_node`\n- `solidfire`\n- `hci_bootstrap_os`\n- `hci_storage_node_firmware`\n- `mac_os_x < 10.14.6`\n- `mac_os_x >= 10.15, < 10.15.7`\n- `mac_os_x = 10.14.6`\n- `mac_os_x = 10.15.7`\n- `macos >= 11.0, < 11.3`\n- `simatic_tim_1531_irc_firmware <= 2.2`\n- `sinec_infrastructure_network_services < 1.0.1.1`\n- `communications_billing_and_revenue_management = 12.0.0.3.0`\n- `communications_cloud_native_core_policy = 1.14.0`\n- `essbase = 21.2`\n- `peoplesoft_enterprise_peopletools = 8.58`\n- `universal_forwarder >= 8.2.0, < 8.2.12`\n- `universal_forwarder >= 9.0.0, < 9.0.6`\n- `universal_forwarder = 9.1.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `libcurl 7.74.0`\n- `mac_os_x 10.15.7`\n- `macos 11.3`\n- `sinec_infrastructure_network_services 1.0.1.1`\n- `universal_forwarder 9.0.6`","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":41.3,"likelihood":0.9,"exploitation":0,"ransomware":0},"changes":[]}